Microsoft Windows 11 Age Verification: 3 ID Checks, 1 System

Soon, your Windows laptop may ask how old you are. To prove it, it might ask for a selfie. Microsoft is building age checks directly into Windows 11. The apps you use will never see your birth date. But to make that promise, Microsoft first has to verify who you are.

If there's a Windows computer in your home, this

If there's a Windows computer in your home, this story is about you. If your kids share that computer, it's about them too. And if handing your face to the software that runs your whole machine makes you a little uneasy, that's a fair reaction. According to the Bangkok Post, Microsoft is rolling out something called the Windows Age A.P.I. An A.P.I. is a doorway. It lets an app ask Windows a question and get a short answer back. In this case, the question is simple: roughly how old is this person? The move follows mounting pressure from lawmakers and regulators. That includes guidance from the F.T.C. earlier this year. The F.T.C. backed age-check technology, but only with safeguards. One of those safeguards says companies should delete the data once they've processed it. The answer apps get is tiny. So what happens to everything it took to produce that answer?

Start with what Microsoft might ask you for. According to the reporting, there are three ways to prove your age. The first is a selfie. Software studies your face and estimates how old you look. The second is uploading an identity document, like a driver's license. The third is signing in through a government digital-identity system, where your country offers one. Which option you see depends on where you live. According to PC World, Microsoft works with outside verification companies to do this, including Yoti and Verifymy.

That detail matters more than it sounds. Your selfie or your license may pass through a company you've never heard of. For someone building a legal case, that raises a sharp question. When you need the verification record, who do you subpoena first, Microsoft, or the vendor that actually checked the face? And what's even left if the data was supposed to be deleted? For the rest of us, it's simpler. Your face might be checked by a company whose name you'd never recognize.

The design does get some things right

Now, the design does get some things right. Apps don't receive your birthday. They get an age range, like "this person is an adult" or "this person is a teen." And not every app can ask. Only apps that register and get cleared through Microsoft's Digital Safety program can use the doorway. Compare that to today, where each app might collect its own ID scan. Twenty apps could mean twenty copies of your license. One check at the operating-system level could mean fewer copies floating around. That's a real improvement.

Critics see the same design differently. The privacy company Proton warns that device-level checks can turn the computer itself into a permanent identity checkpoint. Every document upload and every face scan is something that could be breached. And the systems don't always work. Users of age-check systems have reported wrong age calculations. Some have reported being locked out of their accounts, with no way back in. Locked out. Because software guessed your age wrong.

The law adds another twist. California's Digital Age Assurance Act imagines operating systems sending age signals to app makers when you download an app or create an account. Once a developer gets that signal, they legally know a user's age. Lawyers call that "actual knowledge." If the user is a child, that knowledge triggers a federal law called COPPA, the Children's Online Privacy Protection Act. Suddenly the app maker has new duties it can't ignore. For compliance teams, that's a chain reaction. For parents, it could mean apps start treating your kid differently, whether you asked them to or not.